pre-action-review

pre-action-review is a skill for Cursor from babyblueviper1/invinoveritas. It costs 71 tokens per session (857 once invoked), scanned C, original, Apache-2.0.

An independent approval step before an action that is difficult to undo or has serious consequences.

In plain words
What is it for?
Use it immediately before a high-consequence action to receive a signed approval, approval with concerns, or rejection and any blocking issues.
Why use it?
It adds a second opinion before operations such as force-pushing, merging to the main branch, deploying to production, changing a database schema, running destructive commands, or transferring funds.

Skill for Cursor

Written for Cursor: shipped in a Cursor plugin.

Part of the invinoveritas plugin — 1 skill shipped together

Good fit Use it immediately before a high-consequence action to receive a signed approval, approval with concerns, or rejection and any blocking issues.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/babyblueviper1/invinoveritas/pre-action-review
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add babyblueviper1/invinoveritas --skill pre-action-review
Clone the repo
git clone --depth 1 https://github.com/babyblueviper1/invinoveritas

Made for: Cursor.

Or install invinoveritas, the plugin that ships this one along with the rest of its 1 skill.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for pre-action-review

README.md
[![agentmods](https://agentmods.dev/badge/skills/babyblueviper1/invinoveritas/pre-action-review/github.svg)](https://agentmods.dev/skills/babyblueviper1/invinoveritas/pre-action-review)
Your own site
<a href="https://agentmods.dev/skills/babyblueviper1/invinoveritas/pre-action-review"><img src="https://agentmods.dev/badge/skills/babyblueviper1/invinoveritas/pre-action-review/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for pre-action-review

Your own site · 80×15
<a href="https://agentmods.dev/skills/babyblueviper1/invinoveritas/pre-action-review"><img src="https://agentmods.dev/badge/skills/babyblueviper1/invinoveritas/pre-action-review.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 71 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 857 The whole file, excluding the scripts and references it only reads on demand.
Security scan C 1 finding. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00071 $0.00857
Opus 5 $0.00036 $0.00428
Sonnet 5 $0.00014 $0.00171
Haiku 4.5 $0.00007 $0.00086

Measured 12d ago against content hash 465eb4a04b1a, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-12, from the pricing page.

Security

Grade C, and why

pre-action-review scanned grade C with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Recursive force deletehighDestructive command

rm -rf with a variable or a broad path is one typo away from removing the wrong tree.

- **Destructive or hard-to-reverse shell commands** — `rm -rf`, dropping a database/table,
integrations/cursor-plugin/skills/pre-action-review/SKILL.md · 69 lines

How it starts

The opening of the file, as written. The whole thing — 69 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Pre-action review

Before you execute an action that would be hard or impossible to cleanly undo, call the review tool (via the invinoveritas MCP connection) and pass a plain-text description of exactly what you're about to do. It returns an independent approve / approve_with_concerns / reject verdict with a confidence score and, on reject, specific blocking issues.

When to use this

Call it before, not after, whenever the action fits any of these:

  • Destructive or hard-to-reverse shell commandsrm -rf, dropping a database/table, force-pushing over history, deleting a cloud resource, revoking credentials.
  • Merges and branch operations at scale — this matters more than usual on Origin-style workflows where many agents branch, resolve conflicts, and merge with little or no human in the loop per merge. A signed pre-merge verdict is a real, checkable second opinion on a merge that might otherwise go straight to main unreviewed.
  • Production deploys and migrations — anything that changes live infrastructure, schema, or configuration in a way a rollback might not cleanly reverse.
  • Financial or irreversible-by-nature actions — a payment, a transfer, a trade, deleting a user's data, sending an external communication on someone's behalf.
  • Anything you're not fully confident about — if you'd want a second pair of eyes on this before running it yourself, that's the signal to call review.

Do NOT call it for routine, easily-reversible edits (a normal code change on a feature branch, a local test run, reading a file) — that's noise, not signal, and burns the user's call budget.

How to call it

review(
  artifact="<plain description of the exact action: what command/merge/deploy, on what target,
             with what data at stake>",
  artifact_type="general"   # or "trade" / "onchain_action" for financial actions
)

Be concrete: name the actual command, the actual branch/target, and any stated safeguards (a tested backup, a dry-run result) — a vague artifact gets a vague, less useful verdict.

Read the full file on GitHub · 69 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 12d ago First seen · 69 lines · 71 tokens per session scan C 465eb4a04b1a

Subscribe to this mod's changes

pre-action-review is a skill published in the GitHub repository babyblueviper1/invinoveritas (5 stars, last pushed 2d ago), licensed Apache-2.0. It adds 71 tokens to every session and 857 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it C with 1 finding (recursive force delete). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other skills, from other repositories

html-artifacts

Author the HTML for a plan artifact, dashboard iframe, or Slack attachment — structure, design plan, available runtime, theming, and craft. Read this before writing HTML for saveplan, outputiframe, or slackattachhtml.

langchain-ai/open-swe · 51 tokens

hive.slack-notifications-setup

Set up a Slack notification channel (Sentinel) for a colony by driving the browser — reuse or create the "Hive Sentinel" Slack app from a JSON manifest, install it, capture the bot + app tokens, create/select the channel via the Slack API, and turn Sentinel on so the colony can ping the user on Slack and accept…

aden-hive/hive · 136 tokens

hive.pdf

Read, write, merge, split, rotate, watermark, encrypt, and OCR PDF files using Python (pypdf, pdfplumber, reportlab, pypdfium2) and command-line tools (poppler-utils, qpdf). Use when the user asks to extract text/tables/images from a PDF, create or modify a PDF, combine or split PDFs, OCR a scanned PDF…

aden-hive/hive · 98 tokens

hive.chart-creation-foundations

Required reading whenever any chart tool is available. Teaches the one-tool embedding contract (call chartrender → live chart appears in chat AND a downloadable PNG lands in the queen session dir), the ECharts (data viz) vs Mermaid (structural diagrams) decision, the BI/financial-grade aesthetic baseline (no…

aden-hive/hive · 133 tokens

browser-edge-cases

SOP for debugging browser automation failures on complex websites. Use when browser tools fail on specific sites like LinkedIn, Twitter/X, SPAs, or sites with Shadow DOM.

aden-hive/hive · 40 tokens

baby-sit

Monitor a GitHub pull request until CI is green, diagnose failures, and rerun only evidence-backed flaky GitHub Actions jobs.

langchain-ai/open-swe · 30 tokens